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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

I) 13 Responsive to communication(s) filed on 15 May 2007 . 

2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 33-58 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 333-58 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)Q accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

I I) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (0- 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attach ment(s) 

1) D Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Pa P er No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 5 > □ Notice of lnformal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: . 
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DETAILED ACTION 

Response to Arguments 
Applicant's arguments filed 5/15/07 have been fully considered but they are not 
persuasive. Applicant argues that the prior art does not teach "wherein the conversions 
are based on a conversion indication received from the interface". The examiner argues, 
using the broadest reasonable interpretation of the claim limitation, that Stewart in view 
of Kramer does teach the conversion is based on a conversion indication received from 
the interface. 

As per claims 33, 42, 50, and 56 a conversion indication received may be either a key as 
a key exchange is well known in the process of SSL, or an indication may be received by 
the port used, as SSL uses a well known specific port (443) that would indicate a 
conversion to decrypt encrypted data. Either of these facts, well known in the art of 
security would meet the amended claim limitation. 

Claim Objections 

Claim 50 is objected to because of the following informalities: Claim 50 states "based on 
a conversion indication received from at the server" It is unclear if the indication is from 
the server, or the indication is received at the server. Appropriate correction is required. 
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Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 33-36, 38, 40, 42, 43, 45, 48, 50, 51, 52, and 54-58 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Stewart US 6,571,221 in view of Kramer 
US 2002/0099957. 

As per claims 33, 42, 50, and 56 Stewart teaches an interface to receive data from at least 
one wired client device and one wireless client device, (Col 8 lines 47-55). Stewart 
teaches logic to determine if the device is wired or wireless, (Col 7 lines 43-62, Col 8 
lines 20-30). Stewart teaches requesting a secure connection from a wired or wireless 
dev'ice,(Col 13 lines 33-43). Stewart teaches that the client is authenticated in 
establishing a connection with the wired or wireless device, (Col 14 lines 29-44). 
Stewart does not teach SSL, WTLS or converting encrypted data to an unencrypted 
format. 
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Kramer teaches a security format conversion system including from SSL WTLS, [0024], 
[0050]. Kramer teaches converting the encrypted data to a different format 
(encryption/decryption) [0050]. Kramer teaches a network interface and a server to 
receive converted data, [0049]. It is well known in the art that the port used and key 
exchanged in SSL, and WTLS indicate the recipient decrypt the encrypted data. 
It would have been obvious to one of ordinary skill in the art to use the protocols of 
Kramer with the system of Stewart because SSL and WTLS are widely accepted and 
compatible protocols. 

As per claim 34, Stewart teaches that the device has an interface to transmit data and to 
receive data from a server, (Col 14 lines 16-22). 

As per claims 38, 45, and 52, Stewart teaches requesting a digital certificate of the client 
and authenticating that certificate, (Col 14 lines 19-22, 29-33). 

As per claims 35, 36, 40, 43, 48, 51, 54, and 55 Stewart does not teach protocols or 
determining the client type dependent on protocol. 

Kramer teaches a security format conversion system including from SSL or WTLS, 
[0050]. 
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As per claims 57, and 58 Kramer teaches that all decryption takes place in a VPN server 
or firewall, which is located between a public network and a data center server, [0049], 
Fig 3. 

Claims 37, 41, 44, 46, and 49 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Stewart US 6,571,221 in view of Kramer US 2002/0099957 in view 
of Douglas US 2004/0010684 

As per claims 37 and 44, Stewart fails to teach sending a certificate from the server to the 
client. 

Douglas teaches a handshaking technique where the client and server exchange 
certifications and digital signatures to authenticate each other, [0031], [0032]. 
It would have been obvious to one of ordinary skill in the art to use the handshaking 
technique of Douglas with the system of Stewart-Kramer because it allows the client to 
authenticate the server thus ensuring that the client is not communicating with an 
unauthorized party. 

As per claims 41, and 49, Stewart-Kramer fails to teach receiving a digital signature from 
the client device and validating said signature. 

Douglas teaches a handshaking technique where the client and server exchange 
certifications and digital signatures to authenticate each other, [0029], [0030] [0031]. 
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It would have been obvious to one of ordinary skill in the art to use the digital signatures 
of Douglas with the system of Stewart in order to confirm that data had not been 
manipulated in transit. 

As per claim 46, Stewart -Kramer fails to teach verifying the validity period of the 
certificate. 

Douglas teaches including a timestamp in the signed message, and validating said 
message, [0028], [0029]. It would have been obvious to one of ordinary skill in the art to 
use the timestamp of Douglas with the certificate of Stewart because it would prevent 
replay attacks [Douglas 0028]. 

Claims 39, and 47 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Stewart US 6,571,221 in view of Kramer US 2002/0099957 in view of Hajmiragha 
US 6,289,460 

As per claims 39, and 47, Stewart-Kramer does not teach using a URL with a digital 
certificate. 

Hajmiragha teaches sending a link, rather than the actual digital certificate, (Col 4 lines 
40-43). 

It would have been obvious to one of ordinary skill in the art to use the system of Stewart 
with the link of Hajmiragha, because the link prevents interception and modification of a 
digital certificate between parties. 
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Claims 53 is rejected under 35 U.S.C. 103(a) as being unpatentable over Stewart US 
6,571,221 in view of Kramer US 2002/0099957 in view of Stubblebine US 6,216,231 

As per claim 53, Stewart-Kramer does not teach updating a short lived server certificate 
based on a user defined interval. 

Stubblebine teaches updating a short lived server certificate based on a user defined 
interval, (Col 15 lines 25-36). 

It would have been obvious to one of ordinary skill in the art to use the updating 
certificates of Stubblebine with the Stewart-Kramer combination because short lived 
certificates increase security. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the 



Application/Control Number: 1 0/045,893 Page 8 

Art Unit: 2134 

advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christopher J. Brown whose telephone number is 
(571)272-3833. The examiner can normally be reached on 8:30-6:00. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571)272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Christopher J. Brown 7/26/07 





KAMBIZ ZAND 
SUPERVISORY PATENT EXAMINER 



